NativeDocs Privacy Statement

Who we are and what this statement covers

Techventive IT Solutions Pvt. Ltd. ("Techventive", "we"), CIN U72900UR2022PTC014655, 28 Feet Road, Near Electric Office, Vikasnagar, Dehradun, Uttarakhand, India 248198, provides the NativeDocs managed package for Salesforce ("NativeDocs"). This statement explains what personal data NativeDocs handles and what personal data Techventive receives and uses.

NativeDocs is offered to businesses. The personal data we hold is business contact data about the people who install, license or ask for support with NativeDocs. The Techventive website has its own privacy policy.

Who is responsible for what

For licence, subscription and support data (described below), Techventive decides why and how the data is used. Techventive is the controller under the GDPR and UK GDPR, to the extent they apply, and the data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

For the records, templates and documents in your Salesforce organization, you (the Salesforce customer) are the controller or data fiduciary. Salesforce hosts that data under its agreement with you. Techventive does not collect that data through NativeDocs and does not process it on your behalf in the ordinary course. If you ask us to access it, for example by granting login access for support, we will use it only for that request. Limited technical information can reach Techventive through Salesforce platform features, as described under "What Techventive receives".

If you are an employee, customer or other contact of an organization that uses NativeDocs, that organization controls your data in its Salesforce organization. Please contact it about that data. Techventive does not hold it in the ordinary course and cannot correct or delete it.

What NativeDocs does inside your Salesforce organization

NativeDocs runs on the Salesforce Platform, inside your Salesforce organization. It reads the records you point it at, merges them into your templates and creates a PDF. The user can preview or download the PDF, or save it to Salesforce Files in your organization.

NativeDocs makes no HTTP callouts and uses no third-party service. NativeDocs itself does not send your records, templates or documents to Techventive or to anyone else. Techventive has no access to the contents of your organization unless you choose to share something with us, for example in a support request or by granting login access. Salesforce platform features can pass limited technical information to Techventive, as described under "What Techventive receives". That information is not a copy of your records, templates or documents, although an error message can contain some record content.

What NativeDocs stores in your organization

Inside your organization NativeDocs keeps:

• configuration records that say which templates and objects each document feature uses;
• job and work item records for background (asynchronous) document runs, which are purged after a run;
• an error log with technical diagnostics (such as feature name, record Id and error text) written when a document run fails. The error text may include data from the record involved. Your administrators control and can delete this log.

What Techventive receives

Licence data. When you install or license NativeDocs, the Salesforce License Management App gives Techventive your Salesforce organization Id, organization name, the installing administrator's name and email address, the installed version, the edition and whether the organization is a sandbox or production, the licence status and the number of licence seats.

Usage statistics from Salesforce. After NativeDocs has passed Salesforce's security review, Techventive may use Salesforce AppExchange App Analytics, which gives the package developer usage data about NativeDocs in your organization, such as which features are used and how often, by organization and, in some cases, by user Id. It is not a copy of your records, templates or documents. Salesforce's own terms and program policies govern this data. NativeDocs itself contains no other usage tracking.

Automatic error reports from Salesforce. When code in NativeDocs fails with an error that it does not handle, Salesforce, by default, emails a report to the package developer, which is Techventive. Salesforce's documentation says the report includes the technical stack trace, the error message, your organization Id and name, your My Domain name and the Id of the user concerned. An error message can include a record Id or, in some cases, field content that Salesforce adds to the message. Your Salesforce administrator can add its own recipients for such reports in Setup (Apex Exception Email). Techventive uses these reports only to find and fix faults and keeps them no longer than needed for that.

Login access. Techventive can sign in to your Salesforce organization only if your administrator grants it login access for support. We ask before we need it, use it only for the support issue concerned, and you can withdraw it at any time.

Subscription and billing data. If you subscribe, we also hold the business details we need to invoice you, such as your company name, billing contacts, address and tax registration details, and records of payments.

Support data. If you contact us, we receive what you send: your name, email address, organization Id and the content and attachments of your message. Please do not send customer or staff personal data, passwords or security tokens. Remove or mask personal data in screenshots and error messages first.

Why we use it and our legal bases

We use this data only for the purposes below. We do not use it for advertising, and we do not make decisions about people by automated means. Where the GDPR or UK GDPR applies, our legal bases are shown. Under the DPDP Act we rely on your voluntary provision of data for these purposes, on legitimate uses the Act allows, and on consent where it is required.

• To provide the trial or subscription, manage licences and invoice you (performance of a contract, or steps before a contract);
• To give support and answer your questions (performance of a contract, and our legitimate interest in supporting our customers);
• To send service notices, such as security notices, version notices and changes to our terms (performance of a contract, and legitimate interests);
• To keep accounting and tax records and meet other legal duties (legal obligation);
• To find and fix faults in NativeDocs, using error reports and support information (legitimate interests);
• To understand how NativeDocs features are used and to improve them, using usage statistics from Salesforce (legitimate interests);
• To protect NativeDocs against misuse of licences and to establish or defend legal claims (legitimate interests).

Who we share it with

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We share it with:

• Salesforce, as the platform and licence manager through which NativeDocs is distributed;
• service providers that help us run email, support, accounting, invoicing and payments, who may use the data only to serve us and must keep it confidential;
• professional advisers, such as auditors and lawyers, and tax and other authorities and courts where the law requires or to protect our rights;
• a buyer or successor, if our business or the NativeDocs product is sold or reorganised, who must honour this statement.

International transfers

Techventive is based in India, so licence, billing and support data about you will be handled in India. Our service providers and Salesforce may handle it in other countries. Where the law of your country requires a safeguard for a transfer of personal data out of that country, we will enter into one that the law accepts, such as standard contractual clauses, on request.

How long we keep it

We keep licence, support and error report data while you have a trial or subscription, and afterwards only as long as we need it for the purposes above. We keep accounting and tax records for the period the law requires. We then delete or anonymise the data.

Your rights and how to use them

Depending on where you live, you may have the right to ask us for access to the personal data we hold about you, to correct or complete it, to erase it, to restrict or object to its use, to receive a copy in a portable form, to withdraw consent you gave, and to nominate another person to exercise your rights if you cannot. If a US state privacy law applies to you, you may also ask what we collect, ask us to delete or correct it, and ask us not to sell it or share it for cross-context behavioural advertising. We do neither, and we do not treat you less favourably for using your rights.

To use a right, write to connect@techventivesolutions.com with "Privacy request" in the subject line. We may ask questions to confirm who you are. We will respond within 30 days, and we will tell you if the law lets us take longer and why. There is no charge unless a request is clearly unreasonable or excessive. We may refuse a request where the law allows, and we will say why. Withdrawing consent does not affect what we lawfully did before.

If you are not satisfied, you can complain to us first. You can also complain to the Data Protection Board of India (for DPDP Act matters) or to your local data protection authority, such as the UK Information Commissioner's Office or an authority in the European Economic Area.

Children

NativeDocs and the personal data described here are for business use. They are not directed at children, and we do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, write to us and we will delete it.

Security

NativeDocs enforces the running user's Salesforce object and field access when it reads records, and it removes HTML that is not on its allow-list before it renders a document. We limit access to licence, billing and support data to team members who need it, and we take reasonable technical and organisational steps to protect it. No system is completely secure, so we cannot guarantee that data will never be lost or accessed without permission.

If a breach affects your personal data, we will notify you and the authorities where the law requires. To report a security concern, follow the steps on the NativeDocs Support page.

Changes to this statement

We may update this statement. The version on this page applies, and its "Last updated" date shows when it changed. For a material change, we will email the administrator contact we hold for your organization.

Contact and grievance

For privacy questions and requests, write to connect@techventivesolutions.com with "Privacy request" in the subject line. To raise a grievance about how we handled your personal data, or if we have not resolved a request, write to our Grievance Officer, Shyam Kumar Bansal, Director, at sbansal@techventivesolutions.com with "Privacy grievance" in the subject line. We will acknowledge it and respond within 30 days. If you are not satisfied with our response, you can raise the matter with the Data Protection Board of India or, if the GDPR or UK GDPR applies to you, with your local supervisory authority.

See also the NativeDocs Terms of Service and the NativeDocs Support page.